A security manager is an object that defines a security policy for an application. This policy specifies actions that are unsafe or sensitive. Any actions not allowed by the security policy cause a SecurityException to be thrown. An application can also query its security manager to discover which actions are allowed.
Questions tagged [securitymanager]
218 questions
0
votes
1 answer
how does osgi security model work?
I would like to know how exactly OSGI can check their own Permissions like PackagePermission. I have read that they use a self-made ProtectionDomain but that is not true (for the new releases I was looking at). It would be ok if you just refer to…
SirWindfield
- 117
- 2
- 8
0
votes
1 answer
Java: trouble applying permissions in private policy file
I'm trying to follow the oracle tutorial on using a security manager to grant or deny access to system resources in Java applications: http://docs.oracle.com/javase/tutorial/security/tour2/index.html
I would like to grant my NetBeans projects access…
rodrunner
- 1,860
- 4
- 23
- 34
0
votes
2 answers
How can I allow a final user to run scripts in a JEE environment under specific security constraints?
My JEE app runs under tomee and allows the user to write his/her own scripts and run from a web gui, but I'd like to restrict certain operations such as System.exit(1) for example.
A discussion related to this issue can be found in the beanshell2…
user1073494
0
votes
0 answers
How to run a plugin with a Custom Security Manager?
Right now I am loading classes with a custom Classloader, and then running them. However I want to implement a Security Manager for these classes to prevent them from doing anything malicious.
This includes accessing the filesystem, network,…
Chase
- 1,419
- 12
- 17
0
votes
1 answer
Secure Connection Failed when using tomcat with security manager enabled
I have deployed a web application (example.war) on tomcat 6 with SSL enabled.
When I start tomcat without security manager and try connect to the server with url: "https://localhost:8443/example" it successfully connects and
and displays the…
Prashant Kedia
- 318
- 5
- 14
0
votes
1 answer
Use log4j in a tomcat with security manager
The question is: is it necessary to give read permissions to tomcat-juli.jar for the log4j.properties when you use log4j for tomcat and you are running with security manager? http://tomcat.apache.org/tomcat-7.0-doc/logging.html#Using_Log4j
My…
Gaucho
- 899
- 1
- 12
- 25
0
votes
1 answer
Properties file not found in classpath when using Tomcat with security manager enabled
I have a properties my web application needs, but it is not available at package time. So I put it in TOMCAT_HOME/lib and the application finds it with no problem. When I run Tomcat with security manager enabled, the file is never found. I have…
user1315531
- 3
- 3
0
votes
2 answers
Java SE Security features to protect application data from the user
I've worked through Java SE Security features.
As far as I understood the whole idea of this standard feature is to protect the user from malicious software.
For both java applications on the web, for which SecurityManager is enabled by default and…
Mike
- 20,010
- 25
- 97
- 140
0
votes
1 answer
ReflectPermission("suppressAccessChecks")
I'm having problem with ReflectPermission("suppressAccessChecks"). Whenever I login with authenticated user (user name and password) and try to access a .jsp or any other page in my web application I get
java.security.AccessControlException: access…
Amir
- 1,031
- 2
- 19
- 42
0
votes
1 answer
java.net.SocketPermission : "connect.resolve"
I'm in trouble with connecting Active Directory.
The codes in question is following:
Hashtable env = new…
Web2py user
- 73
- 2
- 11
0
votes
1 answer
System.exit(0) without grant possible under security manager
System.exit(0); or
System.exit(2);
are posiible to execute without error,
run with
java -Djava.security.manager -Djava.security.policy==app.policy -cp bin pl.com.App
app.policy:
grant {
permission java.io.FilePermission "./*",…
bastiat
- 1,799
- 2
- 19
- 38
0
votes
1 answer
Executing JNLP file throws a AccessControlException
I am trying to execute this jnlp application.
However, I keep receiving this security exception:
java.lang.ExceptionInInitializerError
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at…
Sergio
- 8,532
- 11
- 52
- 94
0
votes
1 answer
JAVA SecurityManager - custom BasicPermission with multiple actions
I created the following policy file:
grant {
permission StackPermission "use,save";
};
In order to access it, I run my JVM using the following params:
-Djava.security.manager -Djava.security.policy=my.policy
My code looks like…
user591272
0
votes
0 answers
Security Management for dynamicly loaded code
I'm currently working on a client/server application that supports dynamicly loaded classes.
These classes are plugins which should not be able to access certain methods.
My first idea was a SecurityManager that checked class names in the stacktrace…
Blank Chisui
- 1,043
- 10
- 25
0
votes
1 answer
Is it possible to merge AOP of Spring Security with Java Security Manager?
There is a Swing based multilayer Java application, each module has its back-end and front-end.
Now we want to add security using Spring Security. We have decided not to use AspectJ because of its overhead.
Is it possible to somehow inject the…
Mohammad Hamed
- 51
- 6